Hello,

I've been writing some software based on the MySQL database and the MySQL C++ client. The project works, so no problems there.

However, while finalizing the project and trying to solve some security issues, I stumbled upon something which I believe I cannot solve myself.

What I'm trying to accomplish is get a connection to the mysql database which is SSL encrypted. The mysql C client API has some provisions for this.

To specify the paths to the certificates however, you need to use the mysql_ssl_set( ) and mysql_ssl_clear( ) functions before specifying through client flags that you wish to use the SSL connection feature.

I think I can work around the flags by using the real_connect member of the Connection( ) class, but I cannot manipulate the C clients' MYSQL structure directly, since it's a private member of this class. This is required for specifying the certificates. I'm not exactly sure yet as to whether these are paths to the files or the contents of these files themselves. I assume the former.

I thought of deriving a class from the Connection class to get around this problem, but as I mentioned before, the private member does not allow this.

Am I looking correctly at this ? If so, will there be a version of the C++ client which has this fixed ? Or is it possible to submit a patch to you which solves this and have it included in the mainstream C++ client distribution ?

Thanks in advance for any help.

Best regards,

Michel Stam